#/etc/php.ini ----- Original Message ----- From: "Fajar NS" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 08, 2004 5:10 PM Subject: Re: [tanya-jawab] OOT: INJEKSI SQL untuk CACTI v.0.8.5a
| > ----- Original Message ----- | > From: "Cahyo" <[EMAIL PROTECTED]> | > To: <[EMAIL PROTECTED]> | > Sent: Wednesday, September 08, 2004 3:34 PM | > Subject: Re: [tanya-jawab] OOT: INJEKSI SQL untuk CACTI v.0.8.5a | > | > | > | On Wed, 8 Sep 2004, Dave Matt wrote: | > | | > | :: Dear All, | > | :: yg merasa pake cacti 'kaktus' 0.8.5a dan versi sebelumnya : | > | :: telah ditemukan SQL injeksi...dan saya sudah mencoba : | > | :: | > | :: Injeksi SQL: | > | :: | > | http://server/cacti/auth_changepassword.php?ref=indexphp&action=changepasswo | > | :: rd&password=dave&confirm=dave&submit=Save | > | :: | > | :: Solusi: | > | :: Set "magic_quotes_gpc" ke "on" | > | :: | | ngesetnya di file yg mana ya mas? | saya cari di sourcenya gak nemu paramater itu soalnya | | thx, | | | | -- | Unsubscribe: kirim email kosong ke [EMAIL PROTECTED] | Arsip, FAQ, dan info milis di http://linux.or.id/milis.php | Tidak bisa posting? Baca: | http://linux.or.id/wiki/index.php?pagename=ProblemMilisDanSolusi | http://linux.or.id/wiki/index.php?pagename=TataTertibMilis | | -- Unsubscribe: kirim email kosong ke [EMAIL PROTECTED] Arsip, FAQ, dan info milis di http://linux.or.id/milis.php Tidak bisa posting? Baca: http://linux.or.id/wiki/index.php?pagename=ProblemMilisDanSolusi http://linux.or.id/wiki/index.php?pagename=TataTertibMilis
